I think the title is a little misleading, note that the article title says "seemingly".<p>I think a more likely explanation for the virus' behaviour is that removing other malwares or improving its host's security really just improves its own chances of survival.<p>The article even explains at the end that it installs backdoors, which in my mind rules out the possibility of a benign author.